// threat_intelligence_dashboard

Dashboard de Amenazas

Vulnerabilidades activamente explotadas según el catálogo CISA KEV (Known Exploited Vulnerabilities)

▶ ¿Cómo se calcula el nivel de amenaza global?

El nivel de amenaza global mostrado en la barra de navegación se calcula en base al número de CVEs activamente explotados publicados en el catálogo CISA KEV (Known Exploited Vulnerabilities) durante las últimas horas:

🟢 BAJA — 0 CVEs nuevos en el feed reciente
🟡 MEDIA — 1 a 2 CVEs nuevos activamente explotados
🟠 ALTA — 3 a 4 CVEs nuevos activamente explotados
🔴 CRÍTICA — 5 o más CVEs nuevos activamente explotados

Fuente: CISA Known Exploited Vulnerabilities Catalog — actualizado cada hora.

CVEs añadidos este mes

1587

Total KEV catalogados

Vendors afectados

// cves_añadidos_este_mes

CVE	Producto	Criticidad	Añadido
CVE-2026-31431	Linux Kernel	ALTA	2026-05-01

// top_vendors_afectados

Microsoft

19

Cisco

7

Apple

7

Synacor

4

Google

4

Fortinet

3

Ivanti

3

SolarWinds

3

SmarterTools

3

Linux

2

// catalogo_kev_completo

CVE ID	Producto	Descripción	CVSS	Añadido
CVE-2024-43047	Qualcomm Multiple Chipsets	Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while mainta…	ALTA	2024-10-08
CVE-2024-45519	Synacor Zimbra Collaboration Suite (ZCS)	Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allo…	CRÍTICA	2024-10-03
CVE-2024-29824	Ivanti Endpoint Manager (EPM)	Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated atta…	ALTA	2024-10-02
CVE-2019-0344	SAP Commerce Cloud	SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the med…	CRÍTICA	2024-09-30
CVE-2020-15415	DrayTek Multiple Vigor Routers	DrayTek Vigor3900, Vigor2960, and Vigor300B devices contain an OS command injection vulnerability in cgi-bin/mainfuncti…	CRÍTICA	2024-09-30
CVE-2023-25280	D-Link DIR-820 Router	D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to …	CRÍTICA	2024-09-30
CVE-2024-7593	Ivanti Virtual Traffic Manager	Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows a remote, unauthenticated at…	CRÍTICA	2024-09-24
CVE-2024-8963	Ivanti Cloud Services Appliance (CSA)	Ivanti Cloud Services Appliance (CSA) contains a path traversal vulnerability that could allow a remote, unauthenticate…	CRÍTICA	2024-09-19
CVE-2020-14644	Oracle WebLogic Server	Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthe…	CRÍTICA	2024-09-18
CVE-2022-21445	Oracle ADF Faces	Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vu…	CRÍTICA	2024-09-18
CVE-2020-0618	Microsoft SQL Server	Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectl…	ALTA	2024-09-18
CVE-2024-27348	Apache HugeGraph-Server	Apache HugeGraph-Server contains an improper access control vulnerability that could allow a remote attacker to execute…	CRÍTICA	2024-09-18
CVE-2014-0502	Adobe Flash Player	Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.	ALTA	2024-09-17
CVE-2013-0648	Adobe Flash Player	Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allow…	ALTA	2024-09-17
CVE-2013-0643	Adobe Flash Player	Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote …	ALTA	2024-09-17
CVE-2014-0497	Adobe Flash Player	Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.	CRÍTICA	2024-09-17
CVE-2024-6670	Progress WhatsUp Gold	Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the us…	CRÍTICA	2024-09-16
CVE-2024-43461	Microsoft Windows	Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerabilit…	ALTA	2024-09-16
CVE-2024-8190	Ivanti Cloud Services Appliance	Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console whic…	ALTA	2024-09-13
CVE-2024-38217	Microsoft Windows	Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an attacker …	MEDIA	2024-09-10
CVE-2024-38014	Microsoft Windows	Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gai…	ALTA	2024-09-10
CVE-2024-38226	Microsoft Publisher	Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro p…	ALTA	2024-09-10
CVE-2024-40766	SonicWall SonicOS	SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and…	CRÍTICA	2024-09-09
CVE-2017-1000253	Linux Kernel	Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary…	ALTA	2024-09-09
CVE-2016-3714	ImageMagick ImageMagick	ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW…	ALTA	2024-09-09

← Anterior Página 17 / 64 (1587 CVEs total) Siguiente →